refactor(arc): actions-runner-controller namespace

[buroa]

No description provided.

[bot-blake]

--- kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/gha-runner-scale-set

+++ kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/gha-runner-scale-set

@@ -1,39 +0,0 @@

----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  labels:
-    kustomize.toolkit.fluxcd.io/name: cluster-apps
-    kustomize.toolkit.fluxcd.io/namespace: flux-system
-  name: gha-runner-scale-set
-  namespace: flux-system
-spec:
-  commonMetadata:
-    labels:
-      app.kubernetes.io/name: gha-runner-scale-set
-  decryption:
-    provider: sops
-    secretRef:
-      name: sops-age
-  dependsOn:
-  - name: gha-runner-scale-set-controller
-  - name: openebs
-  interval: 30m
-  path: ./kubernetes/apps/actions-runner-system/gha-runner-scale-set/app
-  postBuild:
-    substituteFrom:
-    - kind: ConfigMap
-      name: cluster-settings
-      optional: true
-    - kind: Secret
-      name: cluster-secrets
-      optional: true
-  prune: true
-  retryInterval: 1m
-  sourceRef:
-    kind: GitRepository
-    name: flux-system
-  targetNamespace: actions-runner-system
-  timeout: 5m
-  wait: true
-
--- kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/gha-runner-scale-set-controller

+++ kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/gha-runner-scale-set-controller

@@ -1,38 +0,0 @@

----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  labels:
-    kustomize.toolkit.fluxcd.io/name: cluster-apps
-    kustomize.toolkit.fluxcd.io/namespace: flux-system
-  name: gha-runner-scale-set-controller
-  namespace: flux-system
-spec:
-  commonMetadata:
-    labels:
-      app.kubernetes.io/name: gha-runner-scale-set-controller
-  decryption:
-    provider: sops
-    secretRef:
-      name: sops-age
-  dependsOn:
-  - name: external-secrets-stores
-  interval: 30m
-  path: ./kubernetes/apps/actions-runner-system/gha-runner-scale-set-controller/app
-  postBuild:
-    substituteFrom:
-    - kind: ConfigMap
-      name: cluster-settings
-      optional: true
-    - kind: Secret
-      name: cluster-secrets
-      optional: true
-  prune: true
-  retryInterval: 1m
-  sourceRef:
-    kind: GitRepository
-    name: flux-system
-  targetNamespace: actions-runner-system
-  timeout: 5m
-  wait: true
-
--- kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/actions-runner-controller

+++ kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/actions-runner-controller

@@ -0,0 +1,38 @@

+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  labels:
+    kustomize.toolkit.fluxcd.io/name: cluster-apps
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: actions-runner-controller
+  namespace: flux-system
+spec:
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: actions-runner-controller
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
+  dependsOn:
+  - name: external-secrets-stores
+  interval: 30m
+  path: ./kubernetes/apps/actions-runner-system/actions-runner-controller/app
+  postBuild:
+    substituteFrom:
+    - kind: ConfigMap
+      name: cluster-settings
+      optional: true
+    - kind: Secret
+      name: cluster-secrets
+      optional: true
+  prune: true
+  retryInterval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  targetNamespace: actions-runner-system
+  timeout: 5m
+  wait: true
+
--- kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/actions-runner-controller-runners

+++ kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/actions-runner-controller-runners

@@ -0,0 +1,39 @@

+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  labels:
+    kustomize.toolkit.fluxcd.io/name: cluster-apps
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: actions-runner-controller-runners
+  namespace: flux-system
+spec:
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: actions-runner-controller-runners
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
+  dependsOn:
+  - name: actions-runner-controller
+  - name: openebs
+  interval: 30m
+  path: ./kubernetes/apps/actions-runner-system/actions-runner-controller/runners
+  postBuild:
+    substituteFrom:
+    - kind: ConfigMap
+      name: cluster-settings
+      optional: true
+    - kind: Secret
+      name: cluster-secrets
+      optional: true
+  prune: true
+  retryInterval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  targetNamespace: actions-runner-system
+  timeout: 5m
+  wait: true
+
--- kubernetes/apps/actions-runner-system/gha-runner-scale-set-controller/app Kustomization: flux-system/gha-runner-scale-set-controller ExternalSecret: actions-runner-system/actions-runner-controller-auth

+++ kubernetes/apps/actions-runner-system/gha-runner-scale-set-controller/app Kustomization: flux-system/gha-runner-scale-set-controller ExternalSecret: actions-runner-system/actions-runner-controller-auth

@@ -1,32 +0,0 @@

----
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  labels:
-    app.kubernetes.io/name: gha-runner-scale-set-controller
-    kustomize.toolkit.fluxcd.io/name: gha-runner-scale-set-controller
-    kustomize.toolkit.fluxcd.io/namespace: flux-system
-  name: actions-runner-controller-auth
-  namespace: actions-runner-system
-spec:
-  dataFrom:
-  - extract:
-      key: actions-runner-controller
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: onepassword-connect
-  target:
-    creationPolicy: Owner
-    name: actions-runner-controller-auth-secret
-    template:
-      data:
-        ACTION_RUNNER_CONTROLLER_GITHUB_APP_ID: '{{ .ACTION_RUNNER_CONTROLLER_GITHUB_APP_ID
-          }}'
-        ACTION_RUNNER_CONTROLLER_GITHUB_INSTALLATION_ID: '{{ .ACTION_RUNNER_CONTROLLER_GITHUB_INSTALLATION_ID
-          }}'
-        ACTION_RUNNER_CONTROLLER_GITHUB_PRIVATE_KEY: '{{ .ACTION_RUNNER_CONTROLLER_GITHUB_PRIVATE_KEY
-          }}'
-        ACTION_RUNNER_CONTROLLER_GITHUB_WEBHOOK_SECRET_TOKEN: '{{ .ACTION_RUNNER_CONTROLLER_GITHUB_WEBHOOK_SECRET_TOKEN
-          }}'
-      engineVersion: v2
-
--- kubernetes/apps/actions-runner-system/gha-runner-scale-set-controller/app Kustomization: flux-system/gha-runner-scale-set-controller HelmRelease: actions-runner-system/gha-runner-scale-set-controller

+++ kubernetes/apps/actions-runner-system/gha-runner-scale-set-controller/app Kustomization: flux-system/gha-runner-scale-set-controller HelmRelease: actions-runner-system/gha-runner-scale-set-controller

@@ -1,35 +0,0 @@

----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  labels:
-    app.kubernetes.io/name: gha-runner-scale-set-controller
-    kustomize.toolkit.fluxcd.io/name: gha-runner-scale-set-controller
-    kustomize.toolkit.fluxcd.io/namespace: flux-system
-  name: gha-runner-scale-set-controller
-  namespace: actions-runner-system
-spec:
-  chart:
-    spec:
-      chart: gha-runner-scale-set-controller
-      sourceRef:
-        kind: HelmRepository
-        name: actions-runner-controller
-        namespace: flux-system
-      version: 0.10.1
-  driftDetection:
-    mode: enabled
-  install:
-    crds: CreateReplace
-    remediation:
-      retries: 3
-  interval: 30m
-  upgrade:
-    cleanupOnFail: true
-    crds: CreateReplace
-    remediation:
-      retries: 3
-      strategy: rollback
-  values:
-    fullnameOverride: gha-runner-scale-set-controller
-
--- kubernetes/apps/actions-runner-system/gha-runner-scale-set/app Kustomization: flux-system/gha-runner-scale-set HelmRelease: actions-runner-system/gha-runner-scale-set

+++ kubernetes/apps/actions-runner-system/gha-runner-scale-set/app Kustomization: flux-system/gha-runner-scale-set HelmRelease: actions-runner-system/gha-runner-scale-set

@@ -1,85 +0,0 @@

----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  labels:
-    app.kubernetes.io/name: gha-runner-scale-set
-    kustomize.toolkit.fluxcd.io/name: gha-runner-scale-set
-    kustomize.toolkit.fluxcd.io/namespace: flux-system
-  name: gha-runner-scale-set
-  namespace: actions-runner-system
-spec:
-  chart:
-    spec:
-      chart: gha-runner-scale-set
-      sourceRef:
-        kind: HelmRepository
-        name: actions-runner-controller
-        namespace: flux-system
-      version: 0.10.1
-  driftDetection:
-    mode: enabled
-  install:
-    remediation:
-      retries: 3
-  interval: 30m
-  upgrade:
-    cleanupOnFail: true
-    remediation:
-      retries: 3
-      strategy: rollback
-  values:
-    containerMode:
-      kubernetesModeWorkVolumeClaim:
-        accessModes:
-        - ReadWriteOnce
-        resources:
-          requests:
-            storage: 25Gi
-        storageClassName: openebs-hostpath
-      type: kubernetes
-    controllerServiceAccount:
-      name: gha-runner-scale-set-controller
-      namespace: actions-runner-system
-    githubConfigUrl: https://github.com/buroa/k8s-gitops
-    maxRunners: 3
-    minRunners: 1
-    nameOverride: gha-runner-scale-set
-    runnerScaleSetName: gha-runner-scale-set
-    template:
-      spec:
-        containers:
-        - command:
-          - /home/runner/run.sh
-          env:
-          - name: ACTIONS_RUNNER_REQUIRE_JOB_CONTAINER
-            value: 'false'
-          - name: NODE_IP
-            valueFrom:
-              fieldRef:
-                fieldPath: status.hostIP
-          image: ghcr.io/buroa/actions-runner:2.321.0@sha256:d28622cbd00742d45f180f3ebb24c24880311a7188f1344f240f2f3ba4a15336
-          name: runner
-          volumeMounts:
-          - mountPath: /var/run/secrets/talos.dev
-            name: talos
-            readOnly: true
-        serviceAccountName: actions-runner
-        volumes:
-        - name: talos
-          secret:
-            secretName: actions-runner
-  valuesFrom:
-  - kind: Secret
-    name: actions-runner-controller-auth-secret
-    targetPath: githubConfigSecret.github_app_id
-    valuesKey: ACTION_RUNNER_CONTROLLER_GITHUB_APP_ID
-  - kind: Secret
-    name: actions-runner-controller-auth-secret
-    targetPath: githubConfigSecret.github_app_installation_id
-    valuesKey: ACTION_RUNNER_CONTROLLER_GITHUB_INSTALLATION_ID
-  - kind: Secret
-    name: actions-runner-controller-auth-secret
-    targetPath: githubConfigSecret.github_app_private_key
-    valuesKey: ACTION_RUNNER_CONTROLLER_GITHUB_PRIVATE_KEY
-
--- kubernetes/apps/actions-runner-system/gha-runner-scale-set/app Kustomization: flux-system/gha-runner-scale-set ServiceAccount: actions-runner-system/actions-runner

+++ kubernetes/apps/actions-runner-system/gha-runner-scale-set/app Kustomization: flux-system/gha-runner-scale-set ServiceAccount: actions-runner-system/actions-runner

@@ -1,14 +0,0 @@

----
-apiVersion: talos.dev/v1alpha1
-kind: ServiceAccount
-metadata:
-  labels:
-    app.kubernetes.io/name: gha-runner-scale-set
-    kustomize.toolkit.fluxcd.io/name: gha-runner-scale-set
-    kustomize.toolkit.fluxcd.io/namespace: flux-system
-  name: actions-runner
-  namespace: actions-runner-system
-spec:
-  roles:
-  - os:admin
-
--- kubernetes/apps/actions-runner-system/gha-runner-scale-set/app Kustomization: flux-system/gha-runner-scale-set ClusterRoleBinding: flux-system/actions-runner

+++ kubernetes/apps/actions-runner-system/gha-runner-scale-set/app Kustomization: flux-system/gha-runner-scale-set ClusterRoleBinding: flux-system/actions-runner

@@ -1,18 +0,0 @@

----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  labels:
-    app.kubernetes.io/name: gha-runner-scale-set
-    kustomize.toolkit.fluxcd.io/name: gha-runner-scale-set
-    kustomize.toolkit.fluxcd.io/namespace: flux-system
-  name: actions-runner
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: cluster-admin
-subjects:
-- kind: ServiceAccount
-  name: actions-runner
-  namespace: actions-runner-system
-
--- kubernetes/apps/actions-runner-system/actions-runner-controller/app Kustomization: flux-system/actions-runner-controller ExternalSecret: actions-runner-system/actions-runner-controller

+++ kubernetes/apps/actions-runner-system/actions-runner-controller/app Kustomization: flux-system/actions-runner-controller ExternalSecret: actions-runner-system/actions-runner-controller

@@ -0,0 +1,32 @@

+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  labels:
+    app.kubernetes.io/name: actions-runner-controller
+    kustomize.toolkit.fluxcd.io/name: actions-runner-controller
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: actions-runner-controller
+  namespace: actions-runner-system
+spec:
+  dataFrom:
+  - extract:
+      key: actions-runner-controller
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword-connect
+  target:
+    creationPolicy: Owner
+    name: actions-runner-controller-secret
+    template:
+      data:
+        ACTION_RUNNER_CONTROLLER_GITHUB_APP_ID: '{{ .ACTION_RUNNER_CONTROLLER_GITHUB_APP_ID
+          }}'
+        ACTION_RUNNER_CONTROLLER_GITHUB_INSTALLATION_ID: '{{ .ACTION_RUNNER_CONTROLLER_GITHUB_INSTALLATION_ID
+          }}'
+        ACTION_RUNNER_CONTROLLER_GITHUB_PRIVATE_KEY: '{{ .ACTION_RUNNER_CONTROLLER_GITHUB_PRIVATE_KEY
+          }}'
+        ACTION_RUNNER_CONTROLLER_GITHUB_WEBHOOK_SECRET_TOKEN: '{{ .ACTION_RUNNER_CONTROLLER_GITHUB_WEBHOOK_SECRET_TOKEN
+          }}'
+      engineVersion: v2
+
--- kubernetes/apps/actions-runner-system/actions-runner-controller/app Kustomization: flux-system/actions-runner-controller HelmRelease: actions-runner-system/actions-runner-controller

+++ kubernetes/apps/actions-runner-system/actions-runner-controller/app Kustomization: flux-system/actions-runner-controller HelmRelease: actions-runner-system/actions-runner-controller

@@ -0,0 +1,34 @@

+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  labels:
+    app.kubernetes.io/name: actions-runner-controller
+    kustomize.toolkit.fluxcd.io/name: actions-runner-controller
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: actions-runner-controller
+  namespace: actions-runner-system
+spec:
+  chart:
+    spec:
+      chart: gha-runner-scale-set-controller
+      sourceRef:
+        kind: HelmRepository
+        name: actions-runner-controller
+        namespace: flux-system
+      version: 0.10.1
+  install:
+    crds: CreateReplace
+    remediation:
+      retries: 3
+  interval: 30m
+  upgrade:
+    cleanupOnFail: true
+    crds: CreateReplace
+    remediation:
+      retries: 3
+      strategy: rollback
+  values:
+    fullnameOverride: actions-runner-controller
+    replicaCount: 1
+
--- kubernetes/apps/actions-runner-system/actions-runner-controller/runners Kustomization: flux-system/actions-runner-controller-runners HelmRelease: actions-runner-system/k8s-gitops-runner

+++ kubernetes/apps/actions-runner-system/actions-runner-controller/runners Kustomization: flux-system/actions-runner-controller-runners HelmRelease: actions-runner-system/k8s-gitops-runner

@@ -0,0 +1,83 @@

+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  labels:
+    app.kubernetes.io/name: actions-runner-controller-runners
+    kustomize.toolkit.fluxcd.io/name: actions-runner-controller-runners
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: k8s-gitops-runner
+  namespace: actions-runner-system
+spec:
+  chart:
+    spec:
+      chart: gha-runner-scale-set
+      sourceRef:
+        kind: HelmRepository
+        name: actions-runner-controller
+        namespace: flux-system
+      version: 0.10.1
+  install:
+    remediation:
+      retries: 3
+  interval: 30m
+  upgrade:
+    cleanupOnFail: true
+    remediation:
+      retries: 3
+      strategy: rollback
+  values:
+    containerMode:
+      kubernetesModeWorkVolumeClaim:
+        accessModes:
+        - ReadWriteOnce
+        resources:
+          requests:
+            storage: 25Gi
+        storageClassName: openebs-hostpath
+      type: kubernetes
+    controllerServiceAccount:
+      name: actions-runner-controller
+      namespace: actions-runner-system
+    githubConfigUrl: https://github.com/buroa/k8s-gitops
+    maxRunners: 3
+    minRunners: 1
+    nameOverride: k8s-gitops-runner
+    runnerScaleSetName: k8s-gitops-runner
+    template:
+      spec:
+        containers:
+        - command:
+          - /home/runner/run.sh
+          env:
+          - name: ACTIONS_RUNNER_REQUIRE_JOB_CONTAINER
+            value: 'false'
+          - name: NODE_IP
+            valueFrom:
+              fieldRef:
+                fieldPath: status.hostIP
+          image: ghcr.io/buroa/actions-runner:2.321.0@sha256:d28622cbd00742d45f180f3ebb24c24880311a7188f1344f240f2f3ba4a15336
+          name: runner
+          volumeMounts:
+          - mountPath: /var/run/secrets/talos.dev
+            name: talos
+            readOnly: true
+        serviceAccountName: k8s-gitops-runner
+        volumes:
+        - name: talos
+          secret:
+            secretName: k8s-gitops-runner
+  valuesFrom:
+  - kind: Secret
+    name: actions-runner-controller-secret
+    targetPath: githubConfigSecret.github_app_id
+    valuesKey: ACTION_RUNNER_CONTROLLER_GITHUB_APP_ID
+  - kind: Secret
+    name: actions-runner-controller-secret
+    targetPath: githubConfigSecret.github_app_installation_id
+    valuesKey: ACTION_RUNNER_CONTROLLER_GITHUB_INSTALLATION_ID
+  - kind: Secret
+    name: actions-runner-controller-secret
+    targetPath: githubConfigSecret.github_app_private_key
+    valuesKey: ACTION_RUNNER_CONTROLLER_GITHUB_PRIVATE_KEY
+
--- kubernetes/apps/actions-runner-system/actions-runner-controller/runners Kustomization: flux-system/actions-runner-controller-runners ServiceAccount: actions-runner-system/k8s-gitops-runner

+++ kubernetes/apps/actions-runner-system/actions-runner-controller/runners Kustomization: flux-system/actions-runner-controller-runners ServiceAccount: actions-runner-system/k8s-gitops-runner

@@ -0,0 +1,14 @@

+---
+apiVersion: talos.dev/v1alpha1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/name: actions-runner-controller-runners
+    kustomize.toolkit.fluxcd.io/name: actions-runner-controller-runners
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: k8s-gitops-runner
+  namespace: actions-runner-system
+spec:
+  roles:
+  - os:admin
+
--- kubernetes/apps/actions-runner-system/actions-runner-controller/runners Kustomization: flux-system/actions-runner-controller-runners ClusterRoleBinding: flux-system/k8s-gitops-runner

+++ kubernetes/apps/actions-runner-system/actions-runner-controller/runners Kustomization: flux-system/actions-runner-controller-runners ClusterRoleBinding: flux-system/k8s-gitops-runner

@@ -0,0 +1,18 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  labels:
+    app.kubernetes.io/name: actions-runner-controller-runners
+    kustomize.toolkit.fluxcd.io/name: actions-runner-controller-runners
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: k8s-gitops-runner
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: k8s-gitops-runner
+  namespace: actions-runner-system
+

[bot-blake]

--- HelmRelease: actions-runner-system/gha-runner-scale-set Role: actions-runner-system/gha-runner-scale-set-gha-rs-manager

+++ HelmRelease: actions-runner-system/gha-runner-scale-set Role: actions-runner-system/gha-runner-scale-set-gha-rs-manager

@@ -1,74 +0,0 @@

----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: gha-runner-scale-set-gha-rs-manager
-  namespace: actions-runner-system
-  labels:
-    app.kubernetes.io/name: gha-runner-scale-set
-    app.kubernetes.io/instance: gha-runner-scale-set
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/part-of: gha-rs
-    actions.github.com/scale-set-name: gha-runner-scale-set
-    actions.github.com/scale-set-namespace: actions-runner-system
-    app.kubernetes.io/component: manager-role
-  finalizers:
-  - actions.github.com/cleanup-protection
-rules:
-- apiGroups:
-  - ''
-  resources:
-  - pods
-  verbs:
-  - create
-  - delete
-  - get
-- apiGroups:
-  - ''
-  resources:
-  - pods/status
-  verbs:
-  - get
-- apiGroups:
-  - ''
-  resources:
-  - secrets
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-- apiGroups:
-  - ''
-  resources:
-  - serviceaccounts
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-- apiGroups:
-  - rbac.authorization.k8s.io
-  resources:
-  - rolebindings
-  verbs:
-  - create
-  - delete
-  - get
-  - patch
-  - update
-- apiGroups:
-  - rbac.authorization.k8s.io
-  resources:
-  - roles
-  verbs:
-  - create
-  - delete
-  - get
-  - patch
-  - update
-
--- HelmRelease: actions-runner-system/gha-runner-scale-set RoleBinding: actions-runner-system/gha-runner-scale-set-gha-rs-manager

+++ HelmRelease: actions-runner-system/gha-runner-scale-set RoleBinding: actions-runner-system/gha-runner-scale-set-gha-rs-manager

@@ -1,25 +0,0 @@

----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: gha-runner-scale-set-gha-rs-manager
-  namespace: actions-runner-system
-  labels:
-    app.kubernetes.io/name: gha-runner-scale-set
-    app.kubernetes.io/instance: gha-runner-scale-set
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/part-of: gha-rs
-    actions.github.com/scale-set-name: gha-runner-scale-set
-    actions.github.com/scale-set-namespace: actions-runner-system
-    app.kubernetes.io/component: manager-role-binding
-  finalizers:
-  - actions.github.com/cleanup-protection
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: gha-runner-scale-set-gha-rs-manager
-subjects:
-- kind: ServiceAccount
-  name: gha-runner-scale-set-controller
-  namespace: actions-runner-system
-
--- HelmRelease: actions-runner-system/gha-runner-scale-set AutoscalingRunnerSet: actions-runner-system/gha-runner-scale-set

+++ HelmRelease: actions-runner-system/gha-runner-scale-set AutoscalingRunnerSet: actions-runner-system/gha-runner-scale-set

@@ -1,68 +0,0 @@

----
-apiVersion: actions.github.com/v1alpha1
-kind: AutoscalingRunnerSet
-metadata:
-  name: gha-runner-scale-set
-  namespace: actions-runner-system
-  labels:
-    app.kubernetes.io/component: autoscaling-runner-set
-    app.kubernetes.io/name: gha-runner-scale-set
-    app.kubernetes.io/instance: gha-runner-scale-set
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/part-of: gha-rs
-    actions.github.com/scale-set-name: gha-runner-scale-set
-    actions.github.com/scale-set-namespace: actions-runner-system
-  annotations:
-    actions.github.com/values-hash: d29db7b900eeeca8c95f8a3c6bdcb9987c7a11d9367bceee2249be9ef512831
-    actions.github.com/cleanup-github-secret-name: gha-runner-scale-set-gha-rs-github-secret
-    actions.github.com/cleanup-manager-role-binding: gha-runner-scale-set-gha-rs-manager
-    actions.github.com/cleanup-manager-role-name: gha-runner-scale-set-gha-rs-manager
-spec:
-  githubConfigUrl: https://github.com/buroa/k8s-gitops
-  githubConfigSecret: gha-runner-scale-set-gha-rs-github-secret
-  runnerScaleSetName: gha-runner-scale-set
-  maxRunners: 3
-  minRunners: 1
-  template:
-    spec:
-      restartPolicy: Never
-      serviceAccountName: actions-runner
-      containers:
-      - name: runner
-        command:
-        - /home/runner/run.sh
-        image: ghcr.io/buroa/actions-runner:2.321.0@sha256:d28622cbd00742d45f180f3ebb24c24880311a7188f1344f240f2f3ba4a15336
-        env:
-        - name: ACTIONS_RUNNER_REQUIRE_JOB_CONTAINER
-          value: 'false'
-        - name: NODE_IP
-          valueFrom:
-            fieldRef:
-              fieldPath: status.hostIP
-        - name: ACTIONS_RUNNER_CONTAINER_HOOKS
-          value: /home/runner/k8s/index.js
-        - name: ACTIONS_RUNNER_POD_NAME
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.name
-        volumeMounts:
-        - mountPath: /var/run/secrets/talos.dev
-          name: talos
-          readOnly: true
-        - name: work
-          mountPath: /home/runner/_work
-      volumes:
-      - name: work
-        ephemeral:
-          volumeClaimTemplate:
-            spec:
-              accessModes:
-              - ReadWriteOnce
-              resources:
-                requests:
-                  storage: 25Gi
-              storageClassName: openebs-hostpath
-      - name: talos
-        secret:
-          secretName: actions-runner
-
--- HelmRelease: actions-runner-system/gha-runner-scale-set-controller ServiceAccount: actions-runner-system/gha-runner-scale-set-controller

+++ HelmRelease: actions-runner-system/gha-runner-scale-set-controller ServiceAccount: actions-runner-system/gha-runner-scale-set-controller

@@ -1,13 +0,0 @@

----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: gha-runner-scale-set-controller
-  namespace: actions-runner-system
-  labels:
-    app.kubernetes.io/name: gha-rs-controller
-    app.kubernetes.io/namespace: actions-runner-system
-    app.kubernetes.io/instance: gha-runner-scale-set-controller
-    app.kubernetes.io/part-of: gha-rs-controller
-    app.kubernetes.io/managed-by: Helm
-
--- HelmRelease: actions-runner-system/gha-runner-scale-set-controller ClusterRole: actions-runner-system/gha-runner-scale-set-controller

+++ HelmRelease: actions-runner-system/gha-runner-scale-set-controller ClusterRole: actions-runner-system/gha-runner-scale-set-controller

@@ -1,144 +0,0 @@

----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: gha-runner-scale-set-controller
-rules:
-- apiGroups:
-  - actions.github.com
-  resources:
-  - autoscalingrunnersets
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - actions.github.com
-  resources:
-  - autoscalingrunnersets/finalizers
-  verbs:
-  - patch
-  - update
-- apiGroups:
-  - actions.github.com
-  resources:
-  - autoscalingrunnersets/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - actions.github.com
-  resources:
-  - autoscalinglisteners
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - actions.github.com
-  resources:
-  - autoscalinglisteners/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - actions.github.com
-  resources:
-  - autoscalinglisteners/finalizers
-  verbs:
-  - patch
-  - update
-- apiGroups:
-  - actions.github.com
-  resources:
-  - ephemeralrunnersets
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - actions.github.com
-  resources:
-  - ephemeralrunnersets/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - actions.github.com
-  resources:
-  - ephemeralrunnersets/finalizers
-  verbs:
-  - patch
-  - update
-- apiGroups:
-  - actions.github.com
-  resources:
-  - ephemeralrunners
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - actions.github.com
-  resources:
-  - ephemeralrunners/finalizers
-  verbs:
-  - patch
-  - update
-- apiGroups:
-  - actions.github.com
-  resources:
-  - ephemeralrunners/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - ''
-  resources:
-  - pods
-  verbs:
-  - list
-  - watch
-- apiGroups:
-  - ''
-  resources:
-  - serviceaccounts
-  verbs:
-  - list
-  - watch
-- apiGroups:
-  - rbac.authorization.k8s.io
-  resources:
-  - rolebindings
-  verbs:
-  - list
-  - watch
-- apiGroups:
-  - rbac.authorization.k8s.io
-  resources:
-  - roles
-  verbs:
-  - list
-  - watch
-  - patch
-
--- HelmRelease: actions-runner-system/gha-runner-scale-set-controller ClusterRoleBinding: actions-runner-system/gha-runner-scale-set-controller

+++ HelmRelease: actions-runner-system/gha-runner-scale-set-controller ClusterRoleBinding: actions-runner-system/gha-runner-scale-set-controller

@@ -1,14 +0,0 @@

----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: gha-runner-scale-set-controller
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: gha-runner-scale-set-controller
-subjects:
-- kind: ServiceAccount
-  name: gha-runner-scale-set-controller
-  namespace: actions-runner-system
-
--- HelmRelease: actions-runner-system/gha-runner-scale-set-controller Role: actions-runner-system/gha-runner-scale-set-controller-listener

+++ HelmRelease: actions-runner-system/gha-runner-scale-set-controller Role: actions-runner-system/gha-runner-scale-set-controller-listener

@@ -1,42 +0,0 @@

----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: gha-runner-scale-set-controller-listener
-  namespace: actions-runner-system
-rules:
-- apiGroups:
-  - ''
-  resources:
-  - pods
-  verbs:
-  - create
-  - delete
-  - get
-- apiGroups:
-  - ''
-  resources:
-  - pods/status
-  verbs:
-  - get
-- apiGroups:
-  - ''
-  resources:
-  - secrets
-  verbs:
-  - create
-  - delete
-  - get
-  - patch
-  - update
-- apiGroups:
-  - ''
-  resources:
-  - serviceaccounts
-  verbs:
-  - create
-  - delete
-  - get
-  - patch
-  - update
-
--- HelmRelease: actions-runner-system/gha-runner-scale-set-controller RoleBinding: actions-runner-system/gha-runner-scale-set-controller-listener

+++ HelmRelease: actions-runner-system/gha-runner-scale-set-controller RoleBinding: actions-runner-system/gha-runner-scale-set-controller-listener

@@ -1,15 +0,0 @@

----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: gha-runner-scale-set-controller-listener
-  namespace: actions-runner-system
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: gha-runner-scale-set-controller-listener
-subjects:
-- kind: ServiceAccount
-  name: gha-runner-scale-set-controller
-  namespace: actions-runner-system
-
--- HelmRelease: actions-runner-system/gha-runner-scale-set-controller Deployment: actions-runner-system/gha-runner-scale-set-controller

+++ HelmRelease: actions-runner-system/gha-runner-scale-set-controller Deployment: actions-runner-system/gha-runner-scale-set-controller

@@ -1,63 +0,0 @@

----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: gha-runner-scale-set-controller
-  namespace: actions-runner-system
-  labels:
-    app.kubernetes.io/name: gha-rs-controller
-    app.kubernetes.io/namespace: actions-runner-system
-    app.kubernetes.io/instance: gha-runner-scale-set-controller
-    app.kubernetes.io/part-of: gha-rs-controller
-    app.kubernetes.io/managed-by: Helm
-    actions.github.com/controller-service-account-namespace: actions-runner-system
-    actions.github.com/controller-service-account-name: gha-runner-scale-set-controller
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: gha-rs-controller
-      app.kubernetes.io/namespace: actions-runner-system
-      app.kubernetes.io/instance: gha-runner-scale-set-controller
-  template:
-    metadata:
-      annotations:
-        kubectl.kubernetes.io/default-container: manager
-      labels:
-        app.kubernetes.io/part-of: gha-rs-controller
-        app.kubernetes.io/component: controller-manager
-        app.kubernetes.io/name: gha-rs-controller
-        app.kubernetes.io/namespace: actions-runner-system
-        app.kubernetes.io/instance: gha-runner-scale-set-controller
-    spec:
-      serviceAccountName: gha-runner-scale-set-controller
-      containers:
-      - name: manager
-        image: ghcr.io/actions/gha-runner-scale-set-controller:0.10.1
-        imagePullPolicy: IfNotPresent
-        args:
-        - --auto-scaling-runner-set-only
-        - --log-level=debug
-        - --log-format=text
-        - --runner-max-concurrent-reconciles=2
-        - --update-strategy=immediate
-        - --listener-metrics-addr=0
-        - --listener-metrics-endpoint=
-        - --metrics-addr=0
-        command:
-        - /manager
-        env:
-        - name: CONTROLLER_MANAGER_CONTAINER_IMAGE
-          value: ghcr.io/actions/gha-runner-scale-set-controller:0.10.1
-        - name: CONTROLLER_MANAGER_POD_NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        volumeMounts:
-        - mountPath: /tmp
-          name: tmp
-      terminationGracePeriodSeconds: 10
-      volumes:
-      - name: tmp
-        emptyDir: {}
-
--- HelmRelease: actions-runner-system/k8s-gitops-runner Role: actions-runner-system/k8s-gitops-runner-gha-rs-manager

+++ HelmRelease: actions-runner-system/k8s-gitops-runner Role: actions-runner-system/k8s-gitops-runner-gha-rs-manager

@@ -0,0 +1,74 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: k8s-gitops-runner-gha-rs-manager
+  namespace: actions-runner-system
+  labels:
+    app.kubernetes.io/name: k8s-gitops-runner
+    app.kubernetes.io/instance: k8s-gitops-runner
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: gha-rs
+    actions.github.com/scale-set-name: k8s-gitops-runner
+    actions.github.com/scale-set-namespace: actions-runner-system
+    app.kubernetes.io/component: manager-role
+  finalizers:
+  - actions.github.com/cleanup-protection
+rules:
+- apiGroups:
+  - ''
+  resources:
+  - pods
+  verbs:
+  - create
+  - delete
+  - get
+- apiGroups:
+  - ''
+  resources:
+  - pods/status
+  verbs:
+  - get
+- apiGroups:
+  - ''
+  resources:
+  - secrets
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+- apiGroups:
+  - ''
+  resources:
+  - serviceaccounts
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - rolebindings
+  verbs:
+  - create
+  - delete
+  - get
+  - patch
+  - update
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - roles
+  verbs:
+  - create
+  - delete
+  - get
+  - patch
+  - update
+
--- HelmRelease: actions-runner-system/k8s-gitops-runner RoleBinding: actions-runner-system/k8s-gitops-runner-gha-rs-manager

+++ HelmRelease: actions-runner-system/k8s-gitops-runner RoleBinding: actions-runner-system/k8s-gitops-runner-gha-rs-manager

@@ -0,0 +1,25 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: k8s-gitops-runner-gha-rs-manager
+  namespace: actions-runner-system
+  labels:
+    app.kubernetes.io/name: k8s-gitops-runner
+    app.kubernetes.io/instance: k8s-gitops-runner
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: gha-rs
+    actions.github.com/scale-set-name: k8s-gitops-runner
+    actions.github.com/scale-set-namespace: actions-runner-system
+    app.kubernetes.io/component: manager-role-binding
+  finalizers:
+  - actions.github.com/cleanup-protection
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: k8s-gitops-runner-gha-rs-manager
+subjects:
+- kind: ServiceAccount
+  name: actions-runner-controller
+  namespace: actions-runner-system
+
--- HelmRelease: actions-runner-system/k8s-gitops-runner AutoscalingRunnerSet: actions-runner-system/k8s-gitops-runner

+++ HelmRelease: actions-runner-system/k8s-gitops-runner AutoscalingRunnerSet: actions-runner-system/k8s-gitops-runner

@@ -0,0 +1,68 @@

+---
+apiVersion: actions.github.com/v1alpha1
+kind: AutoscalingRunnerSet
+metadata:
+  name: k8s-gitops-runner
+  namespace: actions-runner-system
+  labels:
+    app.kubernetes.io/component: autoscaling-runner-set
+    app.kubernetes.io/name: k8s-gitops-runner
+    app.kubernetes.io/instance: k8s-gitops-runner
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: gha-rs
+    actions.github.com/scale-set-name: k8s-gitops-runner
+    actions.github.com/scale-set-namespace: actions-runner-system
+  annotations:
+    actions.github.com/values-hash: 77a9ba0cfa9ebdcad08e93e63de5b2d83b28300cae9adf5f19322d819d97d0f
+    actions.github.com/cleanup-github-secret-name: k8s-gitops-runner-gha-rs-github-secret
+    actions.github.com/cleanup-manager-role-binding: k8s-gitops-runner-gha-rs-manager
+    actions.github.com/cleanup-manager-role-name: k8s-gitops-runner-gha-rs-manager
+spec:
+  githubConfigUrl: https://github.com/buroa/k8s-gitops
+  githubConfigSecret: k8s-gitops-runner-gha-rs-github-secret
+  runnerScaleSetName: k8s-gitops-runner
+  maxRunners: 3
+  minRunners: 1
+  template:
+    spec:
+      restartPolicy: Never
+      serviceAccountName: k8s-gitops-runner
+      containers:
+      - name: runner
+        command:
+        - /home/runner/run.sh
+        image: ghcr.io/buroa/actions-runner:2.321.0@sha256:d28622cbd00742d45f180f3ebb24c24880311a7188f1344f240f2f3ba4a15336
+        env:
+        - name: ACTIONS_RUNNER_REQUIRE_JOB_CONTAINER
+          value: 'false'
+        - name: NODE_IP
+          valueFrom:
+            fieldRef:
+              fieldPath: status.hostIP
+        - name: ACTIONS_RUNNER_CONTAINER_HOOKS
+          value: /home/runner/k8s/index.js
+        - name: ACTIONS_RUNNER_POD_NAME
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.name
+        volumeMounts:
+        - mountPath: /var/run/secrets/talos.dev
+          name: talos
+          readOnly: true
+        - name: work
+          mountPath: /home/runner/_work
+      volumes:
+      - name: work
+        ephemeral:
+          volumeClaimTemplate:
+            spec:
+              accessModes:
+              - ReadWriteOnce
+              resources:
+                requests:
+                  storage: 25Gi
+              storageClassName: openebs-hostpath
+      - name: talos
+        secret:
+          secretName: k8s-gitops-runner
+
--- HelmRelease: actions-runner-system/actions-runner-controller ServiceAccount: actions-runner-system/actions-runner-controller

+++ HelmRelease: actions-runner-system/actions-runner-controller ServiceAccount: actions-runner-system/actions-runner-controller

@@ -0,0 +1,13 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: actions-runner-controller
+  namespace: actions-runner-system
+  labels:
+    app.kubernetes.io/name: gha-rs-controller
+    app.kubernetes.io/namespace: actions-runner-system
+    app.kubernetes.io/instance: actions-runner-controller
+    app.kubernetes.io/part-of: gha-rs-controller
+    app.kubernetes.io/managed-by: Helm
+
--- HelmRelease: actions-runner-system/actions-runner-controller ClusterRole: actions-runner-system/actions-runner-controller

+++ HelmRelease: actions-runner-system/actions-runner-controller ClusterRole: actions-runner-system/actions-runner-controller

@@ -0,0 +1,144 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: actions-runner-controller
+rules:
+- apiGroups:
+  - actions.github.com
+  resources:
+  - autoscalingrunnersets
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - actions.github.com
+  resources:
+  - autoscalingrunnersets/finalizers
+  verbs:
+  - patch
+  - update
+- apiGroups:
+  - actions.github.com
+  resources:
+  - autoscalingrunnersets/status
+  verbs:
+  - get
+  - patch
+  - update
+- apiGroups:
+  - actions.github.com
+  resources:
+  - autoscalinglisteners
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - actions.github.com
+  resources:
+  - autoscalinglisteners/status
+  verbs:
+  - get
+  - patch
+  - update
+- apiGroups:
+  - actions.github.com
+  resources:
+  - autoscalinglisteners/finalizers
+  verbs:
+  - patch
+  - update
+- apiGroups:
+  - actions.github.com
+  resources:
+  - ephemeralrunnersets
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - actions.github.com
+  resources:
+  - ephemeralrunnersets/status
+  verbs:
+  - get
+  - patch
+  - update
+- apiGroups:
+  - actions.github.com
+  resources:
+  - ephemeralrunnersets/finalizers
+  verbs:
+  - patch
+  - update
+- apiGroups:
+  - actions.github.com
+  resources:
+  - ephemeralrunners
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - actions.github.com
+  resources:
+  - ephemeralrunners/finalizers
+  verbs:
+  - patch
+  - update
+- apiGroups:
+  - actions.github.com
+  resources:
+  - ephemeralrunners/status
+  verbs:
+  - get
+  - patch
+  - update
+- apiGroups:
+  - ''
+  resources:
+  - pods
+  verbs:
+  - list
+  - watch
+- apiGroups:
+  - ''
+  resources:
+  - serviceaccounts
+  verbs:
+  - list
+  - watch
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - rolebindings
+  verbs:
+  - list
+  - watch
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - roles
+  verbs:
+  - list
+  - watch
+  - patch
+
--- HelmRelease: actions-runner-system/actions-runner-controller ClusterRoleBinding: actions-runner-system/actions-runner-controller

+++ HelmRelease: actions-runner-system/actions-runner-controller ClusterRoleBinding: actions-runner-system/actions-runner-controller

@@ -0,0 +1,14 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: actions-runner-controller
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: actions-runner-controller
+subjects:
+- kind: ServiceAccount
+  name: actions-runner-controller
+  namespace: actions-runner-system
+
--- HelmRelease: actions-runner-system/actions-runner-controller Role: actions-runner-system/actions-runner-controller-listener

+++ HelmRelease: actions-runner-system/actions-runner-controller Role: actions-runner-system/actions-runner-controller-listener

@@ -0,0 +1,42 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: actions-runner-controller-listener
+  namespace: actions-runner-system
+rules:
+- apiGroups:
+  - ''
+  resources:
+  - pods
+  verbs:
+  - create
+  - delete
+  - get
+- apiGroups:
+  - ''
+  resources:
+  - pods/status
+  verbs:
+  - get
+- apiGroups:
+  - ''
+  resources:
+  - secrets
+  verbs:
+  - create
+  - delete
+  - get
+  - patch
+  - update
+- apiGroups:
+  - ''
+  resources:
+  - serviceaccounts
+  verbs:
+  - create
+  - delete
+  - get
+  - patch
+  - update
+
--- HelmRelease: actions-runner-system/actions-runner-controller RoleBinding: actions-runner-system/actions-runner-controller-listener

+++ HelmRelease: actions-runner-system/actions-runner-controller RoleBinding: actions-runner-system/actions-runner-controller-listener

@@ -0,0 +1,15 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: actions-runner-controller-listener
+  namespace: actions-runner-system
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: actions-runner-controller-listener
+subjects:
+- kind: ServiceAccount
+  name: actions-runner-controller
+  namespace: actions-runner-system
+
--- HelmRelease: actions-runner-system/actions-runner-controller Deployment: actions-runner-system/actions-runner-controller

+++ HelmRelease: actions-runner-system/actions-runner-controller Deployment: actions-runner-system/actions-runner-controller

@@ -0,0 +1,63 @@

+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: actions-runner-controller
+  namespace: actions-runner-system
+  labels:
+    app.kubernetes.io/name: gha-rs-controller
+    app.kubernetes.io/namespace: actions-runner-system
+    app.kubernetes.io/instance: actions-runner-controller
+    app.kubernetes.io/part-of: gha-rs-controller
+    app.kubernetes.io/managed-by: Helm
+    actions.github.com/controller-service-account-namespace: actions-runner-system
+    actions.github.com/controller-service-account-name: actions-runner-controller
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: gha-rs-controller
+      app.kubernetes.io/namespace: actions-runner-system
+      app.kubernetes.io/instance: actions-runner-controller
+  template:
+    metadata:
+      annotations:
+        kubectl.kubernetes.io/default-container: manager
+      labels:
+        app.kubernetes.io/part-of: gha-rs-controller
+        app.kubernetes.io/component: controller-manager
+        app.kubernetes.io/name: gha-rs-controller
+        app.kubernetes.io/namespace: actions-runner-system
+        app.kubernetes.io/instance: actions-runner-controller
+    spec:
+      serviceAccountName: actions-runner-controller
+      containers:
+      - name: manager
+        image: ghcr.io/actions/gha-runner-scale-set-controller:0.10.1
+        imagePullPolicy: IfNotPresent
+        args:
+        - --auto-scaling-runner-set-only
+        - --log-level=debug
+        - --log-format=text
+        - --runner-max-concurrent-reconciles=2
+        - --update-strategy=immediate
+        - --listener-metrics-addr=0
+        - --listener-metrics-endpoint=
+        - --metrics-addr=0
+        command:
+        - /manager
+        env:
+        - name: CONTROLLER_MANAGER_CONTAINER_IMAGE
+          value: ghcr.io/actions/gha-runner-scale-set-controller:0.10.1
+        - name: CONTROLLER_MANAGER_POD_NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
+        volumeMounts:
+        - mountPath: /tmp
+          name: tmp
+      terminationGracePeriodSeconds: 10
+      volumes:
+      - name: tmp
+        emptyDir: {}
+